Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “timing vulnerabilities”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 145 records · Page 8

Cyber–physical vulnerability and resiliency analysis for DER integration: A review, challenges and research needs

High penetration of renewable and sustainable Distributed Energy Resources (DER) into the traditional distribution system requires a well-coordinated control strategy for the improvement of system-wide reliability and resiliency. Implementation of such a holistic control architecture requires a flexible, near real-time, and bi-directional communication framework for facilitating the participation of various agents in a multi-vendor heterogeneous smart grid. While the sustainability of energy generation is ensured, this exposes the smart grid to extrinsic cyber threats, and appropriate defense mechanism(s) must be deployed to guarantee continued reliability and resiliency of the power grid. Further, the comprehensive literature review presented in this paper discusses the latest trends in the DER control schemes with fast communication requirements and their accompanying cyber–physical vulnerabilities. These control schemes are compared and contrasted for various traits. A three-level DER system architecture has been depicted, facilitating the deployment of these control schemes. The current developments of standard communication protocols, key security mechanisms, and best practices along major standards and guidelines are explored. The impacts of different attack types with miscellaneous DER functions based on various control schemes and associated mitigation solutions are also provided. Finally, challenges and future research directions for limiting cyber-power susceptibility to enhance resiliency are summarized. The work presented here will help us enabling a cyber-resilient and sustainable smart electric grid.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Hydraulic architecture explains species moisture dependency but not mortality rates across a tropical rainfall gradient

Aim Intensified droughts are affecting tropical forests across the globe. However, the underlying mechanisms of tree drought response and mortality are poorly understood. Hydraulic traits and especially hydraulic safety margins (HSMs), i.e. the extent to which plants buffer themselves from thresholds of water stress, provide insights into species-specific drought vulnerability. Methods We investigated hydraulic traits during an intense drought triggered by the 2015-2016 El Niño on 27 canopy trees across three tropical forest sites with differing precipitation. We capitalized on the drought event as a time when plant water status might approach or exceed thresholds of water stress. We investigated the degree to which these traits varied across the rainfall gradient, as well as relationships amongst hydraulic traits and species-specific optimal moisture and mortality rates. Results There were no differences among sites for any measured trait. There was strong coordination among traits, with a network analysis revealing two major groups of coordinated traits. In one group there were water potentials, turgor loss point, sapwood capacitance and density, HSMs, and mortality rate. In the second group there was leaf mass per area, leaf dry matter content, hydraulic architecture (leaf area to sapwood area ratio), and species-specific optimal moisture. Conclusion These results demonstrated that while species with greater safety from turgor loss had lower mortality rates, hydraulic architecture was the only trait that explained species’ moisture dependency. Species with a greater leaf area to sapwood area ratio were associated with drier sites and reduced their transpirational demand during the dry season via deciduousness.

Hydraulic Saftey Margins, drought, tropical forest↗

Seismic Resilience of Large Power Transformer Bushings & Non-SF6 Industrial Base Scan Review

Large (high voltage) power transformers (LPT), and more specifically, their bushings, are known to be susceptible to seismic failure. With bushing failure, a transformer will have to be replaced, which has a considerable lead time, adding to the power outage duration. Cost-efficient, proven solutions are not currently available to mitigate this risk, which can persist for the more than 30-year life of a particular transformer. This work will focus on developing and demonstrating a hardware solution to address seismic vulnerabilities and reduce outage risks from LPT failure. Sulfur Hexafluoride (SF6) is a specialty gas with excellent electrical insulation properties which has been used extensively in the power industry. This gas is unfortunately also one of the most potent greenhouse gases known to humanity. A 2014 report by the Intergovernmental Panel on Climate Change found that SF6 has a global warming potential (GWP) 23,000 times higher than Carbon Dioxide, and has the highest GWP of all gases assessed (Myhre 2013). SF6 is almost exclusively man-made and is produced for use as an insulator in high voltage electrical equipment. This makes the production and use of SF6 one of the leading sources of anthropogenic climate change. To fully eliminate the environmental impacts of SF6, alternative technology is needed. The ideal replacement would be a technology that can fulfil the same role as SF6, at the same cost or cheaper, but without adverse environmental effects. Currently, no technology fits this description, however several promising technologies have begun to enter the market. An industry scan was performed to assess the state of industry adoption and manufacturing capability for SF6-free alternative technologies for use at the high-voltage level, and the primary barriers to broader adoption.

10 SYNTHETIC FUELS↗

Ensemble Federated Machine Learning‐Based Cybersecurity Situational Awareness in Microgrid Network

Cyber-physical microgrids are vulnerable to stealthy cybersecurity threats that disguise their actions through the exploitation of system knowledge. Such actions can severely impacts microgrids deployed in defense bases, slowing the response time of military forces during national emergencies. Several machine-learning algorithms have been proposed to detect intrusions in the grid networks; however, these traditional machine-learning algorithms lack data privacy and are subject to several adversarial machine-learning threats. This paper proposes a novel federated machine learning (FML)-based three-model framework to detect and identify stealthy data-integrity attacks while ensuring data privacy in microgrid networks. The proposed architecture uses a variational mode decomposition technique to extract derived features from incoming measurement and control datasets. The extraction of these derived features allows FML models to learn minute variations in data patterns that allow them to perform significantly better than the models trained with generic datasets consisting of raw features. Our experimental results show the efficient performance of the proposed methodology against different types of data integrity attacks while considering primary and secondary controllers in microgrids. Further, the applied FML-integrated random forest ensemble algorithm outperforms the existing generic FML algorithms during noisy and noise-free datasets with prediction latencies of only 91–134 µs per sample within the 0.1 s sampling interval and requires communication bandwidth of around ∼8.25 KB/s at the control center and ∼2.7 KB/s per edge client for communication.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Cybersecurity Lessons Learned from Vehicle to Grid Engagement

As the transportation industry continues to become electrified, introduction of additional digital devices within associated actions such as recharging bring additional potential for cybersecurity attacks. Devices that are designed, implemented, and operated with cybersecurity as a crucial consideration exacerbate these concerns by failing to provide strict boundaries on access to and use of the equipment. Emerging use cases such as Vehicle to Grid (V2G) charging may expand the potential physical effects of a cybersecurity attack by providing indirect access to electrical components of a building microgrid or portions of the larger power grid. This paper serves as an overview of findings and recommendations based on cybersecurity testing performed at a V2G implementation site operated by a member of the Memorandum of Understanding (MOU) to Establish the Vehicle-to-Everything (V2X) Collaboration [1]. The Department of Energy Office of Cybersecurity, Energy Security, and Emergency Response is a signatory of the MOU, and has funded this research paper and associated body of work regarding V2X cybersecurity. Sandia has a large background of previous research focused on Electric Vehicle (EV) cybersecurity, such as reference [2], which includes an overall survey of EV infrastructure cybersecurity and recommendations based on those findings. This report seeks to expand knowledge of EV cybersecurity status and needs by focusing on a specific implementation of V2G charging, and providing recommendations based on the relevant findings. This report serves as a publicly available, sanitized description of applied vulnerability testing on an operational V2G implementation. A more in-depth technical version of the report is provided to the MOU partner, but not available at the time of writing due to inclusion of proprietary information. V2G charging comes with many research problems that must be solved before the technology can securely implemented in sites with unrestricted public access or where cybersecurity attacks could have increased consequences, such as government offices. V2G charging requires many stakeholders such as end users, host sites, equipment vendors, and integrators, which all rely on operational safety and security as well as security and trustworthiness of any associated financial transactions.

33 ADVANCED PROPULSION SYSTEMS↗

Scaling Equitable Finance

Driven by dramatic declines in up-front cost, the U.S. solar photovoltaics (PV) industry has taken off over the past decade, growing from 1 gigawatt of installed capacity in 2009 to 89 gigawatts in 2020—or enough capacity to power roughly 19 million homes. The industry is expected to double in size over just the next 5 years.1 Much of the growth has been driven by large, utility-scale projects that can produce 5 mega- watts or more of power—enough to power at least 1,000 homes. The cost of electricity produced by these projects has decreased by more than 70 percent since 2010. As of Q3 2020, development costs of large, util- ity-scale solar PV power plants were under $1 per watt, down by more than 70 percent from 2010.2 A robust array of investors has come forward to efficiently deliver capital to these kinds of utility-scale projects including large banks, insurance companies, pension funds, and others. But low- and moderate-income communities, including communities of color, are at risk of being left behind in the transition to clean energy. Mission- driven solar project developers and financial institu- tions have been working alongside energy justice advocates to open up solar access for these communi- ties, using strategies ranging from community solar, to solar installations on affordable multifamily housing, to distributed solar and storage programs, and more. Their goals go beyond simply generating more green energy to advancing social equity by: • empowering communities to control their energy future • stabilizing energy prices, saving money, and build- ing wealth for low-income families • creating quality jobs • improving health by reducing pollution • providing energy resilience for vulnerable communities Mission-driven actors are successfully deploying a wide variety of strategies to meet these goals, from helping low-income homeowners get solar—and some- times battery storage, to developing solar projects serv- ing affordable rental housing and community facilities, to building larger “shared solar” projects to which households from across the community can subscribe. However, the financing ecosystem does not work nearly as well for these “mission driven” solar proj- ects as it does for utility-scale projects. For home rooftop solar, even if low-income consumers have a home and suitable roof, they may fail to qualify for federal tax incentives, lack adequate credit to qualify for a loan—or the mission-driven lenders seeking to serve them may not be adequately capitalized to make long-term loans. For mission-driven commercial or community-scale projects, assembling nearly every component of the project capital stack—whether bridging early-stage costs, attracting tax credit equity investors, securing long-term debt, or coming up with sponsor equity and filling gaps—can present challenges. A variety of obstacles contribute to the scarcity of financing for low-income solar, including small project sizes, lack of developer balance sheet capacity, both real and perceived issues with credit risk, elevated technical assistance needs, and greater subsidy requirements to pursue goals such as deep energy affordability, climate resilience, or job creation. Still other obstacles are regulatory: for example, not all states allow community solar projects or Power Purchase Agreements, common strategies used for providing low-income solar—and the potential for regulations to shift over time creates risks that mission-driven projects can ill afford. This report synthesizes information garnered from 47 key informant interviews, four focus group discus- sions involving 60 stakeholders, and a review of the substantial existing literature on low-income solar finance to assess the current landscape of mission- driven solar development in the United States, examine the roles that community-based financial institutions could play, and recommend public invest- ments and policy changes that could help to scale the provision of equitable solar finance. Key recommen- dations for policymakers and funders in the renew- able energy and community development fields that emerge from this process include the following: • Help to capitalize and support community-based lenders to provide flexible, low-cost, and long- term financing to mission-driven solar projects— including providing guarantees or other forms of credit enhancement. • Provide federal support for equitable solar, including a grant-in-lieu-of-credits option for the Investment Tax Credit to improve access to this critical government subsidy. • Develop pools of government and philanthropic support that can complement financing from community-based lenders to complete the capi- tal stack for mission-driven projects, as well as to support education and technical assistance to both consumers and potential project sponsors. • Create a national Renewable Energy Credits pro- gram that includes social equity targets to provide a baseline of support for clean energy generation. • Change utility regulations to remove barriers to low-income solar projects; lower permitting costs; provide greater certainty for developers, consumers and owners; and measure progress toward equity in renewable energy policy implementation.

14 SOLAR ENERGY↗

American Samoa: Unlocking Renewable Energy Potential

Located approximately between Hawaii and New Zealand, American Samoa is the only U.S. territory in the southern hemisphere. American Samoa faces similar climate and energy resilience challenges as other Pacific islands: geographic remoteness, dependence on imported fossil fuels, and increased vulnerability to natural hazards like earthquakes, cyclones, and tsunamis. In 2022, the average electricity price for residential customers in American Samoa was approximately 45 cents/kilowatt-hour (kWh) - almost three times the U.S. average of 15 cents/kWh. Renewable energy represents a small but growing power system contribution, although American Samoa relies almost entirely on imported fossil fuels. The territory possesses substantial solar resources and wind and biomass resource potential. Planned renewable power projects include utility-scale solar photovoltaic (PV) and wind generation with battery storage systems.

American Samoa↗

Towards Secure Autonomous Vehicles: An Integrated Edge and Multi-Modal Machine Learning Framework for Intrusion Detection

Autonomous vehicles (AVs) are vulnerable to cyberattacks targeting both internal communication networks and external perception sensors. While edge-based intrusion de- tection for Controller Area Network (CAN) buses offers real-time protection, it cannot detect cross-modal threats. Conversely, multi-modal fusion approaches improve coverage but often lack efficiency for in-vehicle deployment. This thesis integrates two complemen- tary solutions: (1) a lightweight, edge-deployable machine learning framework for CAN bus intrusion detection, and (2) a late-fusion system combining CAN FD and LiDAR data. Together, they form a hierarchical defense capable of handling single-modality and coordi- nated attacks. Simulations show that CAN-only models reach 93% accuracy on simulated DoS, spoofing, replay, and fuzzy attacks, while the fusion system achieves 0.87 AUC and 0.82 F1-score at 2 ms latency. This unified framework establishes a scalable, explainable, and field-ready strategy for AV cybersecurity.

97 MATHEMATICS AND COMPUTING↗

Automation of Vulnerability and Patch Management: Information Extraction, Association, and Optimization

Vulnerability and patch management is an integral part of a robust cybersecurity program, yet it grows increasingly complex due to the sheer amount of data that must be analyzed. Particularly in Operational Technology (OT) environments, analysis must be done manually because of the lack of automated solutions. Additionally, there are many steps in this process, from the initial discovery of the vulnerability to the implementation of its remediation, and each step in the process requires different data in order to be performed effectively. In this work, we provide approaches and strategies to assist operators in industrial or OT environments throughout the vulnerability management cycle. Security advisories provide key information about mitigation strategies, or actions that can be taken when a patch is unavailable or cannot be installed. Details of these strategies are not shared in public vulnerability databases and must be found manually. We approach this problem by designing a solution to automatically identify that information within vendor security advisories and retrieve it for operator use. We start with an approach that requires domain-specific knowledge of certain frequently-seen reference websites. Next, an approach that can work on an arbitrary website but relies on certain keywords. Finally, an approach that uses Natural Language Processing (NLP) methods and does not require specific knowledge or keywords. Each of these approaches is more general than its predecessor; we demonstrate high accuracy for all approaches Advisories also often contain details of affected products in non-standard or natural language formats. While this information can be easily understood when read by an operator, the non-standard format acts as a barrier to effective automation. We provide an approach for the first step in this process: identifying vendors in security advisories and mapping them to a standard framework for representing digital assets and software products. We evaluate five established string similarity algorithms, plus one of our own design that combines string similarity and information theory, on the task of mapping vendors to their corresponding entries in the Common Platform Enumeration (CPE) repository. Our results show that our proposed metric outperforms all others. Due to the constraints on time, finances, and personnel for organizations, Large Language Models (LLMs) may seem like attractive opportunities for security operators to speed up information gathering; however, it is still not clear whether LLMs can handle vulnerability management tasks well. To answer this question, we perform an empirical study of LLMs’ ability to provide consistent, accurate information about vulnerabilities in order to guide organizations in their adoption of LLMs. We observe poor performance for all models tested, suggesting that these models are not well-suited to the consistent retrieval of accurate vulnerability information. Finally, once vulnerabilities have been identified and any additional information has been obtained, operators must decide which remediation actions to implement based on their available resources. This already-complex problem becomes even more so when we consider that a vulnerability may have multiple avenues for remediation. We formulate this scenario as two knapsack problems and provide solutions, which we then compare against several existing strategies for vulnerability prioritization seen in real operational environments.

McClanahan, Kylie↗

Cybersecurity for Distance Relay Protection

This project is a DOE follow-up effort on the CREDC workshop held on September 13, 2018 in Cambridge, MA to discuss cybersecurity of distance relays, which considered the benefits, vulnerabilities and risk mitigations for the use of communication systems in power system protection. The objectives of this project are to define the taxonomy of relay protection and associated communications; define use cases describing approaches to reduce the cyber-attack surface on those protective relays; and evaluate the loss of operational functional capability from changes to communication coverage. Mitigating controls will also be evaluated to understand if there are other approaches to reduce attack surfaces while maintaining communications or partial communications. Distance relays are used to protect transmission lines of approximately 10 to 300 miles in length, by detecting short circuits (i.e., faults) on the lines and then tripping circuit breakers in the substation. Such protection systems are a subset of the power system and they incorporate sensing, logic and communication functions. Protection system exposure to cyberattack could be drastically limited by disconnecting relays from all vulnerable communication systems, but this may adversely impact overall power system performance in the absence of cyberattack. This project began with a use case analysis of protection systems with communications, as summarized in this report. It continued with modeling, testing and evaluation in a miniature power system (MPS), located in the Western Area Power Administration (WAPA) Electric Power Training Center (EPTC). The project also incorporated feedback from two industry meetings held in February and September 2019. The suggested next steps account for and complement the work already underway with DOE/CESER funding: 1. Study the performance of LCD and PC vs. PUTT, which is less reliant on communication system performance and GPS timing references. The PUTT scheme could prove to be more resilient to cyberattack or communications-related disruption. It could also be more tolerant of message re-routing with SDN/SDR communication systems. On the other hand, it will be more vulnerable to false tripping during dynamic events or to loss of the voltage signal. The optimum choice of scheme may depend on the specific power system and risk assessment. This study could provide a new template for evaluation based on business functions. 2. Research and develop new methods to detect and monitor distributed physical attacks, possibly using drones, video sensors, thermal sensors, machine learning and other advanced techniques. This will help mitigate the impact of cyberattack on the protection system, and will also help mitigate the impact of wild fires. 3. Implement a scalable PKI for use in electric utility protection systems. This will encourage widespread adoption of secure authentication methods that are already available, but not widely used at present. This will help secure engineering access to the relays. 4. Investigate the use of SDN in combination with SDR to achieve better cybersecurity and electromagnetic security of the network, incorporating path variability. This would help secure both engineering access and peer-to-peer GOOSE messaging. 5. Perform additional testing, with operator evaluation of “red button” scenarios, PUTT vs. LCD, relay mis-operations, and other cyberattacks in the EPTC. This is an important advantage of testing in the EPTC rather than by computer simulation or even hardware-in-the-loop simulation; the EPTC is already dedicated to managing the situational awareness, operator response times and other human impacts. One of the project objectives was to settle on a common nomenclature for this problem space. We have concluded that the OSI layer model, supplemented by ANSI device numbers and other IEEE standards, is already well-accepted by the industry. The IEEE PSRC knowledge base provides a great deal of public information

24 POWER TRANSMISSION AND DISTRIBUTION↗

The HyRIGHT Project: 700 bar Hydrogen Refueling Interface for Gaseous Heavy-Duty Trucks

Heavy duty truck fueling places additional constraints on the station. The HyRIGHT project was developed to evaluate a subset of key areas around precooling, communications, and safety risks that aims to:  Utilize a dynamic model that includes the relevant station components and vehicle to develop an optimized precooling strategy based on initial precooling status, real time communications that can support fueling protocol development.  Perform a techno economic cost assessment (TEA) related to effects of precooling including station storage and efficiency effects.  Develop a Cyber Vulnerability assessment and framework for refueling of HD vehicles with station communications.  Disseminate the results in support of the HD fueling protocol development to the relevant standards development organizations.

JAMES, Charles W.↗

Soil aggregate-mediated microbial responses to long-term warming

Soil microbial carbon use efficiency (CUE) is a combination of growth and respiration, which may respond differently to climate change depending on physical protection of soil carbon (C) and its availability to microbes. In a mid-latitude hardwood forest in central Massachusetts, 27 years of soil warming (+5 °C) has resulted in C loss and altered soil organic matter (SOM) quality, yet the underlying mechanisms remain unclear. In this work, we hypothesized that long-term warming reduces physical aggregate protection of SOM, microbial CUE, and its temperature sensitivity. Soil was separated into macroaggregate (250–2000 μm) and microaggregate (<250 μm) fractions, and CUE was measured with 18 O enriched water (H 2 18 O) in samples incubated at 15 and 25 °C for 24 h. We found that long-term warming reduced soil C and nitrogen concentrations and extracellular enzyme activity in macroaggregates, but did not affect physical protection of SOM. Long-term warming showed little effect on CUE or microbial biomass turnover time because it reduced both growth and respiration. However, CUE was less temperature sensitive in macroaggregates from the warmed compared to the control plots. Our findings suggest that microbial thermal responses to long-term warming occur mostly in soil compartments where SOM is less physically protected and thus more vulnerable to microbial degradation.

59 BASIC BIOLOGICAL SCIENCES↗

Uncertainty quantification and reliability assessment for intermodal freight transportation

Intermodal freight optimization models support cost-effective, low-emission, and timely goods movement by coordinating trucks, rail, and barges. These models determine optimal flows, routing, and modal switches while respecting infrastructure and operational constraints. However, their real-world utility is often undermined by pervasive uncertainties-such as fluctuating transportation costs and emissions, variable terminal capacities, and uncertain freight demand-that distort key performance outcomes, including total system cost, carbon footprint, and transit time reliability. This study presents a structured framework for quantifying uncertainty in intermodal freight transportation (IFT) optimization. The framework evaluates how input uncertainty affects system performance and reliability, a critical need for ensuring that model-based decisions remain robust under real-world variability, especially amid volatile fuel prices, shifting demand, and growing disruptions. It integrates three complementary methods: (1) Sobol-based global sensitivity analysis to identify influential parameters affecting cost, emissions, and transit time, (2) Monte Carlo-based capacity perturbation analysis to assess robustness under probabilistic facility disruptions, and (3) Monte Carlo filtering with Bayesian inference to detect threshold-based performance vulnerabilities. The results highlight diesel truck unit cost as the dominant driver of variability. To improve system resilience, planners should prioritize uncertainty in fuel-related parameters when designing intermodal strategies.

Intermodal freight transportation↗

An Inventory of AI-ready Benchmark Data for US Fires, Heatwaves, and Droughts

Extreme weather events, including fires, heatwaves, and droughts, have significant impacts on earth, environmental, and energy systems. Mechanistic and predictive understanding, as well as probabilistic risk assessment of these extreme weather events, are crucial for detecting, planning for, and responding to these extremes. Records of extreme weather events provide an important data source for understanding present and future extremes, but the existing data needs preprocessing before it can be used for analysis. Moreover, there are many nonstandard metrics defining the levels of severity or impacts of extremes. In this study, we compile a comprehensive benchmark data inventory of extreme weather events, including fires, heatwaves, and droughts. The dataset covers the period from 2001 to 2020 with a daily temporal resolution and a spatial resolution of 0.5°×0.5° (~55km×55km) over the continental United States (CONUS), and a spatial resolution of 1km × 1km over the Pacific Northwest (PNW) region, together with the co-located and relevant meteorological variables. By exploring and summarizing the spatial and temporal patterns of these extremes in various forms of marginal, conditional, and joint probability distributions, we gain a better understanding of the characteristics of climate extremes. The resulting AI/ML-ready data products can be readily applied to ML-based research, fostering and encouraging AI/ML research in the field of extreme weather. This study can contribute significantly to the advancement of extreme weather research, aiding researchers, policymakers, and practitioners in developing improved preparedness and response strategies to protect communities and ecosystems from the adverse impacts of extreme weather events. Usage Notes We presented a long term (2001-2020) and comprehensive data inventory of historical extreme events with daily temporal resolution covering the separate spatial extents of CONUS (0.5°×0.5°) and PNW(1km×1km) for various applications and studies. The dataset with 0.5°×0.5° resolution for CONUS can be used to help build more accurate climate models for the entire CONUS, which can help in understanding long-term climate trends, including changes in the frequency and intensity of extreme events, predicting future extreme events as well as understanding the implications of extreme events on society and the environment. The data can also be applied for risk accessment of the extremes. For example, ML/AI models can be developed to predict wildfire risk or forecast HWs by analyzing historical weather data, and past fires or heateave , allowing for early warnings and risk mitigation strategies. Using this dataset, AI-driven risk assessment models can also be built to identify vulnerable energy and utilities infrastructure, imrpove grid resilience and suggest adaptations to withstand extreme weather events. The high-resolution 1km×1km dataset ove PNW are advantageous for real-time, localized and detailed applications. It can enhance the accuracy of early warning systems for extreme weather events, helping authorities and communities prepare for and respond to disasters more effectively. For example, ML models can be developed to provide localized HW predictions for specific neighborhoods or cities, enabling residents and local emergency services to take targeted actions; the assessment of drought severity in specific communities or watersheds within the PNW can help local authorities manage water resources more effectively.

Lin, Xinming↗

VWC-BERT: Scaling Vulnerability–Weakness–Exploit Mapping on Modern AI Accelerators

Defending cybersystems needs accurate mapping of software and hardware vulnerabilities to generalized descriptions of weaknesses, and weaknesses to exploits. These mappings enable cyber defenders to build plans for effective defense and assessment of potential risks to a cybersystem. With close to 170k vulnerabilities, manual mapping is not a feasible option. However, automated mapping is challenging due to limited training data, computational intractability, and limitations in computational natural language processing. Tools based on breakthroughs in Transformer-based language models have been demonstrated to classify vulnerabilities with high accuracy. We make three key contributions in this paper: (1) We present a new framework, \VWCBERT, that augments the Transformer-based hierarchical multi-class classification framework of Das et al. (\textsc{V2W-BERT}) with the ability to map weaknesses to exploits. (2) We implement \VWCBERT~ on modern AI accelerator platforms using two data parallel techniques for the pre-training phase and demonstrate nearly linear speedups across NVIDIA and Graphcore accelerator platforms. We observe nearly linear speedups for up to 16 V100 and 8 A100 GPUs, and about 3.4$\times$ speedup for A100 relative to V100 GPUs. We also observe excellent speedups on Graphcore, with $5.7\times$ speedup on 128 IPUs relative to 16 IPUs. Enabled by scaling, we also demonstrate higher accuracy using a larger language model, RoBERTa-Large. We show up to 87\% accuracy for strict and up to 98\% accuracy for relaxed classification. (3) We develop a novel parallel link manager for the link prediction phase and demonstrate up to 21$\times$ speedup with 16 V100 GPUs relative to one V100 GPU, and thus reducing the runtime from 2.5 hours to 10 minutes. We believe that generalizability and scalability of \VWCBERT~ will benefit both the theoretical development and practical deployment of novel cyberdefense solutions and vulnerability classification.

Das, Siddhartha Shankar↗

Ensuring a Nuclear Power Plant Safe State Following an EMP Event - Task 7 Deliverable: EMP Testing of Secondary Coupling to Instrumentation Cables

Sandia National Laboratories performed tests to address the potential vulnerability concerns of a coupled High-Altitude Electromagnetic Pulse (HEMP) inducing secondary coupling onto critical instrumentation and control cables in a nuclear power plant, with specific focus on early-time HEMP. Three types of receiving cables in nine configurations were tested to determine transfer functions between two electrically separated cables referenced to the common mode input current on the transmitting cable. One type of transfer function related the input short circuit current and resulting open circuit voltage on the receiving cable. The other transfer function related the input short circuit current and the resulting short circuit current on the receiving cable. A 500 A standard HEMP waveform was input into the transfer functions to calculate peak coupling values on the receiving cables. The highest level of coupling using the standard waveform occurred when cables were in direct contact, with a peak short circuit current of 85 A and open circuit voltage of 9.8 kV, while configurations with separated cables predicted coupling levels of less than 5 A or 500 V.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

A Systematic Approach for Estimating High-Altitude Electromagnetic Pulse Coupling onto Power Generation Facility Equipment

A systematic approach is presented to evaluate the effects of high-altitude electromagnetic pulse (HEMP) signals on the equipment located inside a power generation facility. The approach uses a combination of practical measurement and simulation efforts to characterize the radio wave propagation behavior and the device immunity profile. Of particular interest in this work was estimating the vulnerability level of equipment that is connected to long cables. As an example application, a detailed study was conducted for one common class of facility equipment, and its frequency- and time-domain HEMP coupling properties were investigated as a function of terminal loading condition and cable attachment configuration. Overall, the proposed method can be generalized and applied to other electronic components and systems found in the facility environment.

42 ENGINEERING↗

The best of both worlds – entering the nursing profession with support of a transition programme

Abstract Background Transition into clinical practice for newly graduated nurses is a difficult time, with high stress levels defined by a demanding period of personal and professional acclimatisation. Transitions are complicated and multi‐dimensional, and to understand this process, it is crucial to identify the factors that facilitate or stand in the way of a healthy transition. Aim The phenomenological study aimed to describe newly graduated nurses’ expectations of transitioning into the nursing profession at the start of a clinical nursing introduction programme, including education, supervision, and critical reflection with peers. Method The study was based on seven group interviews with newly graduated nurses. The interviews utilised open‐ended and follow‐up questions and were carried out as a dialogue to enable reflection on the phenomenon of interest. This was explored and illuminated using the reflective lifeworld research approach, based on phenomenological epistemology. Findings “Expectations of transition into the nursing profession via the Clinical Nursing Introduction Programme” is signified by an oscillating movement between uncertainty, security, challenge, and growth on the threshold of a new identity. The phenomenon is constituted by the courage to grow, responsibility and fear, belonging and vulnerability, and support and challenge. Conclusion Transitioning into the nursing profession via the Clinical Nursing Introduction Programme means having the best of both worlds. Newly graduated nurses have the opportunity to receive education and structured support at the same time as they work independently in clinical practice.

Berglund, Mia↗